Mobile Security

The Mobile Settings page found under Protect > Mobile Security allows you to enforce mobile device policies for settings like password stringency or screen auto-locking. Policies defined in Mobile Settings will be enforced for all mobile devices connected to email through Forcepoint ONE SSE.

Device Operations

  • Allow User Device Wipe and Removal: When enabled, will provide an option on the User portal for end users to wipe their devices and remove them from the portal if they will no longer be used with Forcepoint ONE SSE.
  • Allow Role Admins to factory reset mobile devices: When enabled, will allow other role admins the ability to do a full factory reset on devices. This option is turned off by default.

    To initiate a wipe, go to the user's User/Device activity page.

    • If factory reset is not enabled, you will only see the option to perform a Selective Wipe which will only remove the user's access to the cloud application and corporate data.
    • If factory reset is enabled you will see an option for a Full Wipe that will initiate a full factory reset.
    Note: System admins will still have the ability to factory reset mobile devices even if this option is not enabled.

Device Policy

When enabled, device policies defined in the email server will be replaced with the Forcepoint ONE SSE policy. If disabled, device policies defined in the email server will pass through and be applied to devices.

  • Enabling Enforce Forcepoint Policy with no settings defined will result in a permissive empty/blank device policy being applied to all mobile devices.
  • Enabling Require Device Password ensures that all devices connecting to Forcepoint ONE SSE have a password enabled that meets the password requirements stipulated in the policy. As well, end users must meet the phone's requirements for complex passwords. Patterns such as sequential numbers (1234), repeated numerals (1111), ascending and descending numbers (2323, 5454), or swipe might not be available. Pattern restrictions depend upon the phone manufacturer and application used to configure ActiveSync.